Last Updated: [Insert Date]

At Dravyayu ("we," "our," "us"), we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit our website www.dravyayu.in (the "Website") or purchase our products.

By using our Website or placing an order with us, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect information in the following ways:

A. Information You Provide to Us Directly

• Account & Contact Information — Name, email address, phone number, delivery address, billing address
• Order Information — Products purchased, order value, payment method, order history
• Communication Data — Messages you send us via WhatsApp, email, contact forms, or live chat
• Reviews & Feedback — Product reviews, ratings, testimonials, and survey responses you submit
• Newsletter Sign-up — Email address (and name, if provided) when you subscribe

B. Information Collected Automatically

• Device & Browser Information — IP address, browser type, device type, operating system
• Usage Data — Pages visited, time spent on pages, products viewed, links clicked
• Cookies & Tracking Technologies — See Section 6 below for full details
• Location Data — General location (city/state level) inferred from your IP address, used for delivery estimates and currency display

C. Information from Third Parties

• Payment Processors — Razorpay shares limited transaction confirmation data with us (we do not store your full card or UPI details)
• Marketing Platforms — Meta (Facebook/Instagram) and Google may share aggregated, anonymised audience data when you interact with our ads
• Logistics Partners — Shiprocket and courier partners share delivery status updates

2. How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders, including payment processing and shipping
• Communicate with you about your order status, shipping updates, and delivery confirmations
• Respond to your customer support queries via WhatsApp, email, or chat
• Send you marketing communications (only if you have opted in) such as product updates, wellness tips, and offers
• Personalise your shopping experience and show you relevant product recommendations
• Improve our Website, products, and customer service based on usage patterns and feedback
• Detect, prevent, and address fraud, security issues, or technical problems
• Comply with applicable legal, tax, and regulatory obligations, including those under the Drugs and Cosmetics Act and Ayush guidelines

3. Legal Basis for Processing Your Information

We process your personal information on the following grounds:

• Consent — For marketing communications via email and WhatsApp, which you can withdraw at any time
• Contractual Necessity — To process and deliver the orders you place with us
• Legitimate Business Interest — To improve our services, prevent fraud, and maintain Website security
• Legal Obligation — To comply with applicable Indian laws, including consumer protection and Ayush regulatory requirements

4. How We Share Your Information

We do not sell your personal information to third parties. We share your information only in the following circumstances:

Recipient Purpose Data Shared ShopifyE-commerce platform hosting our store Order, account, and browsing data Razorpay Payment processing Transaction details (not full card/bank details) Shiprocket & Courier Partners Order delivery Name, address, phone number Meta (Facebook/Instagram) & Google Advertising and analytics Anonymised/hashed contact data for ad targeting (only if you have not opted out)WhatsApp Business API Providers (e.g. Interakt/WATI) Order updates and customer support Phone number, order details Email Marketing Platform (e.g. Klaviyo) Newsletters and promotional emails. Email address, name, purchase history Legal & Regulatory Authorities When required by law, court order, or government requestAs legally mandated

All third-party service providers are contractually required to protect your data and use it only for the purposes we specify.

5. Data Storage & Security

• Your data is stored on secure servers provided by Shopify and our other technology partners, which maintain industry-standard security certifications.
• We use SSL (Secure Socket Layer) encryption to protect data transmitted between your browser and our Website.
• Payment information is processed directly by Razorpay under PCI-DSS compliant infrastructure — we do not store your complete card, UPI, or banking details on our own servers.
• While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged into your account
• Remember items in your cart
• Understand how visitors use our Website (via Google Analytics)
• Show you relevant ads on Meta/Instagram and Google (via Meta Pixel and Google Ads tags)
• Measure the effectiveness of our marketing campaigns

Types of cookies we use:

• Essential Cookies — Required for the Website to function (cart, checkout, login)
• Analytics Cookies — Help us understand visitor behaviour (Google Analytics)
• Marketing Cookies — Used for retargeting ads (Meta Pixel, Google Ads)

You can control or disable cookies through your browser settings. Please note that disabling essential cookies may affect Website functionality, including your ability to complete a purchase.

7. Your Rights

You have the right to:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate or incomplete information
• Withdraw Consent — Opt out of marketing emails and WhatsApp messages at any time by clicking "unsubscribe" or replying "STOP"
• Deletion — Request deletion of your account and associated personal data, subject to our legal obligation to retain certain transaction records (e.g., for tax and Ayush compliance purposes)
• Data Portability — Request your data in a structured, commonly used format, where applicable

To exercise any of these rights, please contact us at care@dravyayu.com. We will respond within a reasonable timeframe as required under applicable law.

8. Data Retention

We retain your personal information for as long as necessary to:

• Fulfil the purpose for which it was collected
• Comply with legal, tax, and regulatory recordkeeping obligations (including Ayush and GST-related records)
• Resolve disputes and enforce our agreements

Order and transaction records are typically retained for a minimum of [X years] as required under Indian tax law, even after account deletion is requested.

9. Children's Privacy

Our Website and checkout process are intended for use by individuals aged 18 and above. While we offer a Kids Wellness product range, all purchases must be made by an adult. We do not knowingly collect personal information directly from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

10. Marketing Communications & Opt-Out

If you have subscribed to our newsletter or provided your phone number at checkout, we may send you:

• Order and shipping updates (transactional — cannot be opted out of while an order is active)
• Promotional offers, wellness tips, and product updates (marketing — fully optional)

You can opt out of marketing communications at any time by:

• Clicking "Unsubscribe" at the bottom of any marketing email
• Replying "STOP" to any WhatsApp marketing message
• Emailing us at care@dravyayu.com with your opt-out request

11. Third-Party Links

Our Website may contain links to third-party websites (such as social media platforms). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies separately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

13. Grievance Officer

In accordance with the Information Technology Act, 2000, and the rules made thereunder, the details of the Grievance Officer are provided below:

Name: [Insert Name]

Designation: Grievance Officer

Email: care@dravyayu.com

Address: [Insert Registered Business Address]

If you have any concerns regarding the processing of your personal information, you may contact our Grievance Officer, who will address your concern within the timeframe prescribed under applicable law.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please reach out to us:

📧 Email: care@dravyayu.com

📞 Phone: [Insert Phone Number]

📍 Address: [Insert Registered Business Address, Bihar, India]

💬 WhatsApp: [Insert WhatsApp Business Number]

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the jurisdiction of the courts in [Insert City], Bihar.